$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac76b0a-06fd-3be5-92fc-a354844aff35.roa File: fac76b0a-06fd-3be5-92fc-a354844aff35.roa (raw, json) Hash identifier: ey9VUZyiRNMu2wVRfaj00EZguvscxivUFdPr7u4aeyw= Subject key identifier: A5:F8:AE:0F:F7:9C:65:74:C9:2C:CD:E3:6C:91:68:CA:B5:CB:AF:55 Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7 Certificate serial: 010D0C9F4328584AEE590B1D32367FD9E2CF8180 Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac76b0a-06fd-3be5-92fc-a354844aff35.roa Signing time: Thu 21 Aug 2025 14:42:34 +0000 ROA not before: Thu 21 Aug 2025 14:42:34 +0000 ROA not after: Wed 19 Nov 2025 15:42:34 +0000 asID: 4766 IP address blocks: 64.81.170.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ee:59:0b:1d:32:36:7f:d9:e2:cf:81:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7 Validity Not Before: Aug 21 14:42:34 2025 GMT Not After : Nov 19 15:42:34 2025 GMT Subject: CN=f563068e-79ee-47a4-82ee-71aaeac0c4bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:30:ec:c9:9b:40:ba:2b:f3:9d:08:3e:a0:b1: 13:8c:81:12:81:c3:77:b9:15:4f:e1:cf:6c:02:a9: d5:b9:33:db:ec:22:64:37:e0:87:f5:29:69:3d:2a: 21:aa:8f:77:a3:19:49:43:3b:15:36:22:f5:8a:8e: fc:e6:b2:41:e5:09:0d:26:18:5c:23:b7:0a:71:9a: 6a:be:36:63:93:68:e7:e0:91:93:6f:d6:bc:26:e2: 9c:90:52:ed:2c:a2:5c:5e:f5:a2:7d:23:2e:c1:c7: 7b:f3:69:97:05:98:b8:e6:56:48:fc:58:ae:54:79: 43:e0:10:d5:70:cd:43:59:31:10:cf:66:77:43:f9: bd:66:31:0c:67:8c:3b:7e:bc:52:ff:28:26:10:32: 01:08:9f:34:07:e2:63:20:1f:42:73:c6:f8:54:e0: cf:b3:4e:1f:04:9d:92:6e:5b:63:a0:6c:14:10:00: 29:a1:6a:55:17:05:42:97:9c:c7:2c:6c:2b:bb:59: 80:14:98:85:8a:d6:43:f5:d4:89:f8:ef:07:a4:c9: 23:dc:61:20:86:ba:84:70:f7:0e:f4:c3:32:50:a0: 46:d7:dd:04:d7:37:bb:d8:a2:32:e5:d1:41:e0:1e: b9:a5:57:69:c8:b8:07:59:ef:44:d8:e2:e4:ae:1b: ac:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:F8:AE:0F:F7:9C:65:74:C9:2C:CD:E3:6C:91:68:CA:B5:CB:AF:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/fac76b0a-06fd-3be5-92fc-a354844aff35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl X509v3 Authority Key Identifier: keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer sbgp-ipAddrBlock: critical IPv4: 64.81.170.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:14:95:16:f1:7f:b0:90:46:3f:61:37:7b:8e:0d:93:54:f8: 68:75:d8:00:16:ce:d4:6b:79:0d:72:7f:a9:d7:e8:23:1f:e5: 48:eb:69:69:17:48:01:07:4e:43:07:f1:90:ac:ff:a9:2b:de: f5:93:5c:ea:e3:bc:6d:52:f8:34:06:8e:6a:6e:43:07:56:58: ac:ec:ef:74:55:d3:2e:f4:88:d0:03:f6:56:ad:26:45:d1:34: db:ed:d2:25:6b:0b:77:fb:44:25:f9:95:37:e5:88:2d:2f:16: 23:e5:c3:72:90:cc:9b:8a:01:a3:a4:0c:65:29:b4:1e:d8:b1: 1e:3d:d6:cd:5b:84:40:79:b4:c4:14:90:a5:58:bd:d5:f7:4f: bd:9b:53:75:db:a5:42:7a:d2:ad:f2:79:fb:98:f0:e2:b9:6f: 7d:c4:54:a9:26:42:83:ef:bc:1a:a7:31:22:c2:83:20:00:69: 31:d1:cf:2b:66:13:6c:7b:62:3d:be:43:f1:c4:eb:d8:6a:8e: 11:86:ad:c7:98:f9:7b:08:42:97:3c:db:9e:a6:a1:fd:69:1b: a9:ab:0e:03:ac:d7:cb:5d:ae:8b:11:f0:86:a1:92:19:56:28: 1c:cf:73:e6:bd:e8:ee:7b:ca:9a:7c:70:da:03:47:bc:ff:10: e6:28:13:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEruWQsdMjZ/2eLPgYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh YWU3MB4XDTI1MDgyMTE0NDIzNFoXDTI1MTExOTE1NDIzNFowLzEtMCsGA1UEAxMk ZjU2MzA2OGUtNzllZS00N2E0LTgyZWUtNzFhYWVhYzBjNGJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzDsyZtAuivznQg+oLETjIESgcN3uRVP4c9s AqnVuTPb7CJkN+CH9SlpPSohqo93oxlJQzsVNiL1io785rJB5QkNJhhcI7cKcZpq vjZjk2jn4JGTb9a8JuKckFLtLKJcXvWifSMuwcd782mXBZi45lZI/FiuVHlD4BDV cM1DWTEQz2Z3Q/m9ZjEMZ4w7frxS/ygmEDIBCJ80B+JjIB9Cc8b4VODPs04fBJ2S bltjoGwUEAApoWpVFwVCl5zHLGwru1mAFJiFitZD9dSJ+O8HpMkj3GEghrqEcPcO 9MMyUKBG190E1ze72KIy5dFB4B65pVdpyLgHWe9E2OLkrhusSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKX4rg/3nGV0ySzN42yRaMq1y69VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3 MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvZmFjNzZiMGEtMDZmZC0z YmU1LTkyZmMtYTM1NDg0NGFmZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0 YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQFGqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKoUlRbxf7CQRj9hN3uODZNU+Gh12AAWztRreQ1yf6nX6CMf5UjraWkX SAEHTkMH8ZCs/6kr3vWTXOrjvG1S+DQGjmpuQwdWWKzs73RV0y70iNAD9latJkXR NNvt0iVrC3f7RCX5lTfliC0vFiPlw3KQzJuKAaOkDGUptB7YsR491s1bhEB5tMQU kKVYvdX3T72bU3XbpUJ60q3yefuY8OK5b33EVKkmQoPvvBqnMSLCgyAAaTHRzytm E2x7Yj2+Q/HE69hqjhGGrceY+XsIQpc8256mof1pG6mrDgOs18tdrosR8IahkhlW KBzPc+a96O57ypp8cNoDR7z/EOYoExY= -----END CERTIFICATE-----Generated at Sat Aug 23 17:06:17 2025 by rpki-client